Best Practice to Allow External Consultants to Connect to Company VM/Network

Reaching out for advice/best practice to allow 3 remote external consultants to have the ability to remote into a company VM for an audit. This is a vendor we've worked with in the past, and in the past they gave access by creating a persistent WebEx connection.

I was wondering if it would be more secure/cleaner to create temporarily VPN access with the temp vendor AD accounts to a terminal VM server versus a persistent Webex connection to 3 physical …

best practice consultants cybersecurity network practice